$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: yb0d/ZcutgNuoOQMO5HASpEO9D/MeKiWaDtlgo0XxOs= Subject key identifier: 10:AC:E2:E8:8D:81:FC:58:CB:04:0B:D0:99:DE:A0:14:27:7D:7D:00 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 28 Signing time: Wed 25 Mar 2026 07:58:10 +0000 Manifest this update: Wed 25 Mar 2026 07:58:09 +0000 Manifest next update: Wed 01 Apr 2026 07:58:09 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: 6ae7HlhD5vpTRmWq1EVWT8xasgGXTlkpuecrpe6G9Kc=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Mar 25 07:58:09 2026 GMT Not After : Apr 1 07:58:09 2026 GMT Subject: CN=69c39592-c4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:eb:97:b0:c3:c7:bd:83:79:c9:e4:af:1b: e8:ea:cf:fb:7b:ec:fb:0b:83:1e:9b:66:32:22:8e: 20:71:62:1d:5f:1f:a9:10:56:3b:c2:88:54:04:39: 70:f4:80:f4:c5:27:9a:94:19:44:a6:43:3c:07:33: 80:f1:67:8e:65:d9:a5:66:b1:c4:da:e7:33:95:02: 34:13:1a:84:5f:39:88:38:85:af:f3:b5:00:ae:91: d2:4a:f7:07:9e:b2:67:97:5f:12:e9:af:55:3f:f6: 15:34:86:e5:07:ed:3e:38:7e:39:03:e3:e6:45:66: 07:4f:6a:6f:f7:08:1e:33:99:37:c5:1b:58:ba:07: c5:20:d0:d7:6d:49:25:de:a9:24:57:9e:f6:5e:27: 17:1a:0d:f9:d1:ca:7a:16:29:23:08:c9:bc:59:cd: 4a:be:d1:d7:97:86:ed:ba:28:e3:9d:3b:6f:d3:88: b4:26:c7:3a:d4:63:d4:ce:08:f4:93:12:31:9f:8c: ab:83:69:08:b4:b0:8d:66:9d:a5:9f:39:63:14:ee: a3:91:b4:9c:a7:a2:f0:2d:1b:da:0a:cd:6e:15:2b: 04:27:68:f6:09:2e:a4:97:12:68:02:90:83:92:e9: 62:59:f7:ed:b3:46:39:bd:43:2a:5b:36:8a:68:3d: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:E2:E8:8D:81:FC:58:CB:04:0B:D0:99:DE:A0:14:27:7D:7D:00 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:6c:9e:7b:e8:30:0e:36:5f:33:07:30:07:eb:10:83:de:ca: 64:57:35:e7:34:27:20:4b:68:22:1e:3b:10:c9:be:9e:fa:63: 90:dc:02:8f:37:ff:37:23:c3:73:5e:a1:86:be:58:12:6a:3e: 68:21:1a:98:3a:d0:ef:ad:ad:06:ab:c3:fc:cb:fc:4a:e0:8d: 27:0b:7f:c4:2f:fd:43:ae:2b:2e:97:d4:d8:7a:c0:76:2a:a0: 1e:14:a0:e1:45:80:fd:e2:0c:2b:76:80:68:8b:14:12:e1:5c: fd:94:62:80:20:35:2b:c7:b3:97:48:82:c7:7c:f3:38:07:30: fc:9b:de:51:d7:89:2f:fd:de:c6:27:a9:37:b9:68:6e:26:31: 15:4b:9c:71:69:7d:2e:7e:2d:3c:a2:1b:7b:95:41:e4:09:60: 58:11:02:37:05:91:00:f7:b5:ef:ed:5b:ff:12:e1:c1:5d:a1: 58:e2:43:10:86:4f:f8:be:af:47:51:66:ae:10:2a:2d:a7:1b: 9e:aa:f9:68:24:c3:84:ab:f8:4a:20:69:21:7c:f1:6f:ac:c3: 0a:88:27:29:02:16:5f:8f:b9:93:b2:d1:66:7a:f8:ea:95:3d: 1b:b3:aa:10:13:bb:d5:a2:ac:1a:63:07:4a:f8:37:9b:69:7e: b9:bc:50:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjAzMjUwNzU4MDlaFw0yNjA0MDEwNzU4MDlaMBgxFjAUBgNV BAMTDTY5YzM5NTkyLWM0YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxLuuXsMPHvYN5yeSvG+jqz/t77PsLgx6bZjIijiBxYh1fH6kQVjvCiFQEOXD0 gPTFJ5qUGUSmQzwHM4DxZ45l2aVmscTa5zOVAjQTGoRfOYg4ha/ztQCukdJK9wee smeXXxLpr1U/9hU0huUH7T44fjkD4+ZFZgdPam/3CB4zmTfFG1i6B8Ug0NdtSSXe qSRXnvZeJxcaDfnRynoWKSMIybxZzUq+0deXhu26KOOdO2/TiLQmxzrUY9TOCPST EjGfjKuDaQi0sI1mnaWfOWMU7qORtJynovAtG9oKzW4VKwQnaPYJLqSXEmgCkIOS 6WJZ9+2zRjm9QypbNopoPb0pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEKzi6I2B /FjLBAvQmd6gFCd9fQAwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAbJ576DAONl8zBzAH6xCD3spkVzXnNCcgS2giHjsQyb6e+mOQ3AKPN/83I8Nz XqGGvlgSaj5oIRqYOtDvra0Gq8P8y/xK4I0nC3/EL/1Drisul9TYesB2KqAeFKDh RYD94gwrdoBoixQS4Vz9lGKAIDUrx7OXSILHfPM4BzD8m95R14kv/d7GJ6k3uWhu JjEVS5xxaX0ufi08oht7lUHkCWBYEQI3BZEA97Xv7Vv/EuHBXaFY4kMQhk/4vq9H UWauECotpxueqvloJMOEq/hKIGkhfPFvrMMKiCcpAhZfj7mTstFmevjqlT0bs6oQ E7vVoqwaYwdK+DebaX65vFDb -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:36 2026 by rpki-client